Microsoft Microsoft Certifications MS-101 Questions & Answers

• Question 311:

  Your company uses Microsoft System Center Configuration Manager (Current Branch) and Microsoft Intune to co-manage devices.

  Which two actions can be performed only from Intune? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Deploy applications to Windows 10 devices.

  B. Deploy VPN profiles to iOS devices.

  C. Deploy VPN profiles to Windows 10 devices.

  D. Publish applications to Android devices.

  Correct Answer: BD

  References: https://docs.microsoft.com/en-us/sccm/comanage/overview https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/create-vpn-profiles

• Question 312:

  You have a Microsoft 365 tenant.

  All users are assigned the Enterprise Mobility + Security license.

  You need to ensure that when users join their device to Microsoft Azure Active Directory (Azure AD), the device is enrolled in Microsoft Intune automatically.

  What should you configure?

  A. Enrollment restrictions from the Intune admin center

  B. device enrollment managers from the Intune admin center

  C. MAM User scope from the Azure Active Directory admin center

  D. MDM User scope from the Azure Active Directory admin center

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/intune/windows-enroll

• Question 313:

  You have Windows 10 Pro devices that are joined to an Active Directory domain.

  You plan to create a Microsoft 365 tenant and to upgrade the devices to Windows 10 Enterprise.

  You are evaluating whether to deploy Windows Hello for Business for SSO to Microsoft 365 services.

  What are two prerequisites of the deployment? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. computers that have biometric hardware features

  B. Microsoft Intune enrollment

  C. Microsoft Azure Active Directory (Azure AD)

  D. smartcards

  E. TPM-enabled devices

  Correct Answer: BC

  References: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base

• Question 314:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure pilot co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You unjoin Device1 from the Active Directory domain.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 315:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure pilot co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You add Device1 to an Active Directory group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  https://www.scconfigmgr.com/2017/11/30/how-to-setup-co-management-part-6/

• Question 316:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure pilot co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You create a device configuration profile from the Intune admin center.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 317:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are deploying Microsoft Intune.

  You successfully enroll Windows 10 devices in Intune.

  When you try to enroll an iOS device in Intune, you get an error.

  You need to ensure that you can enroll the iOS device in Intune.

  Solution: You create an Apple Configurator enrollment profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 318:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are deploying Microsoft Intune.

  You successfully enroll Windows 10 devices in Intune.

  When you try to enroll an iOS device in Intune, you get an error.

  You need to ensure that you can enroll the iOS device in Intune.

  Solution: You configure the Apple MDM Push certificate.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/intune/apple-mdm-push-certificate-get

• Question 319:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You are deploying Microsoft Intune.

  You successfully enroll Windows 10 devices in Intune.

  When you try to enroll an iOS device in Intune, you get an error.

  You need to ensure that you can enroll the iOS device in Intune.

  Solution: You add your user account as a device enrollment manager.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/intune/apple-mdm-push-certificate-get

• Question 320:

  DRAG DROP

  You have a Microsoft 365 subscription.

  You have the devices shown in the following table.

  

  You need to onboard the devices to Microsoft Defender for Endpoint. The solution must avoid installing software on the devices whenever possible.

  Which onboarding method should you use for each operating system? To answer, drag the appropriate methods to the correct operating systems. Each method may be used once, more than once, or not at all. You may need to drag the split

  bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-windows-defender-advanced-threat-protection https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/configure-endpoints-windows-defender-advanced-threat-protection https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/configure-server-endpoints-windows-defender-advanced-threat-protection